You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+12-2Lines changed: 12 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -8,19 +8,29 @@ In particular:
8
8
- It creates a "owner" role, [that owns the database (in PostgreSQL parlance)](https://www.postgresql.org/docs/current/ddl-priv.html) and have all the permissions there.
9
9
- It creates a set of default roles that can be assumed when working on the database:
10
10
11
-
- A "read-only" role `${DBNAME}_ro`, that is only able to read objects
11
+
- A "read-only" role `${DBNAME}_ro`, that is only able to read objects;
12
12
- A "read-write" role `${DBNAME}_rw`, that is only able to write into that database, but not create objects.
13
13
14
14
These roles can be assumed by developers or operators, when they have been granted the right to do so. These persons then have automatically the associated rights on that database.
15
15
16
+
- It creates a set of Vault policies (when `vault_backend_path` is provided).
17
+
18
+
-`${vault_backend_path}/${DB_NAME}`, that obtain credentials for the owner;
19
+
-`${vault_backend_path}/${DB_NAME}_ro`, that obtains credentials for the `${DB_NAME}_ro` role;
20
+
-`${vault_backend_path}/${DB_NAME}_rw`, that obtains credentials for the `${DB_NAME}_rw` role.
0 commit comments